@intentius/behold 0.13.1 → 0.15.0

package/example-writes/package-lock.json

@@ -6,9 +6,9 @@
     "": {
       "name": "behold-example-writes",
       "dependencies": {
-        "@intentius/chant": "^0.52.1",
-        "@intentius/chant-lexicon-aws": "^0.52.1",
-        "@intentius/chant-lexicon-temporal": "^0.52.1"
+        "@intentius/chant": "^0.53.1",
+        "@intentius/chant-lexicon-aws": "^0.53.1",
+        "@intentius/chant-lexicon-temporal": "^0.53.1"
       }
     },
     "node_modules/@dagrejs/dagre": {
@@ -443,9 +443,9 @@
       }
     },
     "node_modules/@intentius/chant": {
-      "version": "0.52.1",
-      "resolved": "https://registry.npmjs.org/@intentius/chant/-/chant-0.52.1.tgz",
-      "integrity": "sha512-JvlJ8JrmcDWF6IhmO1aJPgBCMIoTT9xUu/4sOs+3O2NSILZFJBJ3gN23FMW3goN+HP0HbniPtR/MH5cklpam0Q==",
+      "version": "0.53.1",
+      "resolved": "https://registry.npmjs.org/@intentius/chant/-/chant-0.53.1.tgz",
+      "integrity": "sha512-AIVy6/NQxnplHPip+oYhbgr1qe8QCzUc7heqiXoV9OZynn6x+/4sflrFha98dOotJ7Fraj2/QjfGQ+q1DpXK8w==",
       "license": "Apache-2.0",
       "dependencies": {
         "@dagrejs/dagre": "^3.0.0",
@@ -461,30 +461,30 @@
       }
     },
     "node_modules/@intentius/chant-lexicon-aws": {
-      "version": "0.52.1",
-      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-aws/-/chant-lexicon-aws-0.52.1.tgz",
-      "integrity": "sha512-TuTt3AMfAZmtuyfYGijtO5HjtHab9XSE1f2a51PjfzbgBspwQT1dfMa1SGnGsDbtgtaE1sUoe48bbTfU12dQmw==",
+      "version": "0.53.1",
+      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-aws/-/chant-lexicon-aws-0.53.1.tgz",
+      "integrity": "sha512-LyI7IMib1m69k+oNovrBw/RNJqIM17vSj9ew+h5kviGf3KHfyU0VxPX5n6mxqZCNK5LAoMtRlW/cdzN2caJAWQ==",
       "license": "Apache-2.0",
       "dependencies": {
         "fflate": "^0.8.2",
         "js-yaml": "^4.3.1"
       },
       "peerDependencies": {
-        "@intentius/chant": "^0.52.1",
+        "@intentius/chant": "^0.53.1",
         "typescript": "^5.9.3"
       }
     },
     "node_modules/@intentius/chant-lexicon-temporal": {
-      "version": "0.52.1",
-      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-temporal/-/chant-lexicon-temporal-0.52.1.tgz",
-      "integrity": "sha512-tVBZTPF3FZSeyLgHSid8+6jrxii/pRQEW4na8M4FnA5kGbUKTL8+Ckwsobp9nIE7HFWfBKdLcoCNt6Guw/tEfA==",
+      "version": "0.53.1",
+      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-temporal/-/chant-lexicon-temporal-0.53.1.tgz",
+      "integrity": "sha512-zcj1OzDgOXUG/c50Bd3FWW7arodD72Wm50CItar0XBcXEV/w+gZaB/ksXx/D5vrRJvccZP2oIMSAsdLaVRso4w==",
       "license": "Apache-2.0",
       "dependencies": {
         "@temporalio/common": "^1.17.2",
         "js-yaml": "^4.3.1"
       },
       "peerDependencies": {
-        "@intentius/chant": "^0.52.1",
+        "@intentius/chant": "^0.53.1",
         "typescript": "^5.9.3",
         "zod": "^4.3.6"
       }

package/example-writes/package.json

@@ -7,8 +7,8 @@
     "build": "./node_modules/.bin/chant build src --lexicon aws -o template.json"
   },
   "dependencies": {
-    "@intentius/chant": "^0.52.1",
-    "@intentius/chant-lexicon-aws": "^0.52.1",
-    "@intentius/chant-lexicon-temporal": "^0.52.1"
+    "@intentius/chant": "^0.53.1",
+    "@intentius/chant-lexicon-aws": "^0.53.1",
+    "@intentius/chant-lexicon-temporal": "^0.53.1"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/behold",
-  "version": "0.13.1",
+  "version": "0.15.0",
   "type": "module",
   "description": "behold — a live control plane on chant. See your whole estate (every substrate in one graph), coloured by drift; act through delegated, gated Ops.",
   "bin": {
@@ -35,8 +35,8 @@
   },
   "dependencies": {
     "@hono/node-server": "^2.0.5",
-    "@intentius/chant": "^0.52.1",
-    "@intentius/chant-k8s-client": "^0.52.1",
+    "@intentius/chant": "^0.53.1",
+    "@intentius/chant-k8s-client": "^0.53.1",
     "@intentius/pinhole": "^0.3.7",
     "hono": "^4.12.34"
   },

package/web/app.js

@@ -46,12 +46,16 @@ import { fetchDemos, demoLabel, demoTitle, demoProgress } from "./demos.js";
 // #284 item 2: the run playhead's panel — the verdict wording, the pending gate
 // card and the settled-step rows. Everything it DECIDES is pure in there; the
 // fetches, the SSE subscription and the graph re-pull stay here.
-import { hasPlayhead, renderPlayhead } from "./run-playhead.js";
+import { hasPlayhead, renderPlayhead, waitingFor } from "./run-playhead.js";
 // #234 joins 3 + 1: the operator strip (one honestly-dated tick per ConvergeOp,
 // the lease, the pending gate count) and the converge gate card, whose Approve
 // records a fact for the next tick rather than releasing anything. Same split as
 // the playhead — the decisions are pure in there, the fetches stay here.
 import { hasOperator, renderOperator, APPROVED_SEMANTICS } from "./operator.js";
+// #165: the recorded release on a component — which run put it here, from
+// which commit, approved by whom — and, when the ledger's run id cannot be
+// followed, the reason in words rather than a guessed link.
+import { releaseRows } from "./release.js";
 initTheme();
 initPanel();
 mountThemePicker(document.getElementById("panel-theme"));
@@ -382,6 +386,11 @@ function inspect(node) {
   // joinComponentStatus, so its presence picks the component-status label set
   // over the entity overlay's managed/foreign/pending.
   const liveStatus = node.attrs && node.attrs._liveStatus;
+  // chant#2027: what the operating loop's last tick said about this component
+  // (src/component-status.ts's joinTickVerdicts). Same component-status
+  // vocabulary as `_liveStatus`, one tier lower and dated — so it picks the same
+  // label set, and it may sit alongside a live verdict rather than replacing it.
+  const tickStatus = node.attrs && node.attrs._tickStatus;
   // behold#146: a Helm chart's status is artifact presence, not management —
   // the join sets `_artifact` on a match, and every Helm::Chart in an overlay
   // went through it, so the kind alone is the reliable picker.
@@ -396,7 +405,7 @@ function inspect(node) {
       "status",
       driftLabel ||
         (node.lexicon === "op" ? opStatusLabel(node) : undefined) ||
-        (isArtifact ? ARTIFACT_STATUS_LABEL[st] : liveStatus ? COMPONENT_STATUS_LABEL[st] : STATUS_LABEL[st]) ||
+        (isArtifact ? ARTIFACT_STATUS_LABEL[st] : liveStatus || tickStatus ? COMPONENT_STATUS_LABEL[st] : STATUS_LABEL[st]) ||
         st,
     );
   if (node.attrs && node.attrs._artifact) {
@@ -514,8 +523,58 @@ function inspect(node) {
     live("", `runtime child — owned by ${node.runtimeOwner || "its declared parent"}, not itself declared`);
   }
 
+  // What the operating loop's last tick said about this component (chant#2027).
+  // Its own section, never folded into "live status": a tick is dated, and the
+  // date is the point. Shown alongside a live verdict when there is one — the
+  // two can disagree, and which is newer is the reader's to see, not behold's to
+  // resolve. The heading itself carries the age, and a tick too old to have
+  // painted says so in words rather than leaving its verdict to be read as now.
+  if (tickStatus) {
+    const ago = tickStatus.at ? waitingFor(tickStatus.at) : null;
+    const tick = section(`converge tick${ago ? ` · ${ago} ago` : ""}${tickStatus.stale ? " · not painted" : ""}`);
+    tick("reconciliation", tickStatus.reconciliation);
+    if (tickStatus.detail) tick("detail", tickStatus.detail);
+    if (tickStatus.live !== undefined) tick("observed live", String(tickStatus.live));
+    if (tickStatus.unobserved) {
+      tick("unobserved", tickStatus.unobserved.detail ? `${tickStatus.unobserved.reason} — ${tickStatus.unobserved.detail}` : tickStatus.unobserved.reason);
+    }
+    tick("recorded by", tickStatus.env ? `${tickStatus.op} (${tickStatus.env})` : tickStatus.op);
+    tick("at", tickStatus.at);
+    if (tickStatus.tickId) tick("tick", tickStatus.tickId);
+    if (tickStatus.stale) {
+      tick("", "older than the operator's own cadence allows for — this verdict is history, so no colour was taken from it");
+    }
+  }
+
+  // The recorded release (#165, #61's second clause): the ledger row behold
+  // reads on `chant components status` and, until now, read past. Its own
+  // section beside "live status", because the two answer different questions
+  // — what is running versus what was recorded putting it there — and the
+  // reconciliation verdict above is exactly their comparison. The run is a link
+  // only when the record itself carries an address (chant#2045); a bare id
+  // gets its reason, never a guessed forge (web/release.js).
+  const release = node.attrs && node.attrs._release;
+  if (release) {
+    const rel = section("release");
+    for (const [k, v] of releaseRows(release)) {
+      if (v && typeof v === "object" && v.href) {
+        const a = document.createElement("a");
+        a.href = v.href;
+        a.textContent = v.text;
+        a.target = "_blank";
+        a.rel = "noreferrer noopener";
+        a.title = `${v.href} — the address the release record itself carries (chant#2045). behold never invents this link.`;
+        rel(k, a);
+      } else {
+        rel(k, v);
+      }
+    }
+  }
+
   // Declared attributes — the source-of-truth values / cross-resource refs.
-  const attrKeys = Object.keys(node.attrs || {}).filter((k) => !k.startsWith("_"));
+  // The `release` chip is the card's abbreviation of the section above, not a
+  // declared value, so it stays out of this list when the section rendered.
+  const attrKeys = Object.keys(node.attrs || {}).filter((k) => !k.startsWith("_") && !(k === "release" && release));
   if (attrKeys.length) {
     const decl = section("declared");
     for (const k of attrKeys) decl(k, fmtValue(node.attrs[k]));
@@ -589,7 +648,7 @@ function inspect(node) {
   // `observed` map already carries a runtime child (chant's describeResources
   // reports it the same as any other resource it found), and its own
   // `fieldDrift` may apply too on a substrate with per-field ownership.
-  const observed = st === "good" || st === "warn" || st === "runtime" || (st === "neutral" && !liveStatus);
+  const observed = st === "good" || st === "warn" || st === "runtime" || (st === "neutral" && !liveStatus && !tickStatus);
   if (view.env && observed) {
     const forId = node.id;
     const loading = document.createElement("p");
@@ -1867,6 +1926,11 @@ let runStatusInFlight = false;
 // playhead's reason: a loop belongs to its project, not to a picked env/tier.
 let operatorState = null;
 let operatorInFlight = false;
+// #234, chant#2029 — the converge timeline behind the strip. Closed until a
+// human opens it, read once when they do, and never on a timer: the strip is the
+// at-a-glance line that ages by itself, the history is a ledger's past and does
+// not change while you read it. `data` is src/operator.ts's OperatorHistory.
+let operatorHistory = { open: false, loading: false, error: null, data: null };
 let componentChoices = []; // component names for the apply picker — loaded lazily (independent of whether the graph pane is currently in components mode)
 let componentStatusById = {}; // id -> _status ("good"|"accent"|"warn"|"neutral"), populated alongside componentChoices — lets the picker show which stacks are already applied
 
@@ -2067,7 +2131,17 @@ function mountOperator(host) {
   if (!view.ops || !hasOperator(operatorState)) return;
   const box = document.createElement("div");
   box.className = "operator-strip";
-  renderOperator(box, operatorState, { approve: (op, gate) => approveConvergeGate(op, gate) });
+  renderOperator(
+    box,
+    operatorState,
+    {
+      approve: (op, gate) => approveConvergeGate(op, gate),
+      // A static export has no server to ask, so it gets no history affordance
+      // at all rather than a button that can only fail.
+      ...(staticMode ? {} : { history: () => toggleOperatorHistory() }),
+    },
+    operatorHistory,
+  );
   host.appendChild(box);
 }
 
@@ -3816,6 +3890,48 @@ function pollOperatorStatus() {
     });
 }
 
+/**
+ * Open or close the converge history (#234, chant#2029), reading it the first
+ * time it is opened.
+ *
+ * This is the whole poll discipline for the timeline: a click. `chant operator
+ * log` walks the project's `chant/lifecycle` ledger, and an interval against it
+ * would spend a process per tick of the clock to be handed a past that hasn't
+ * moved. Re-opening re-reads, so a human who wants the newest ticks closes and
+ * opens — an explicit ask, which is what this surface is.
+ */
+function toggleOperatorHistory() {
+  operatorHistory = { ...operatorHistory, open: !operatorHistory.open };
+  if (operatorHistory.open) loadOperatorHistory();
+  renderDial();
+}
+
+/**
+ * Read one bounded window of the converge timeline.
+ *
+ * The server clamps and reports the window it used (src/operator.ts's
+ * OPERATOR_LOG_MAX_LIMIT), so the panel states the bound rather than implying it
+ * is showing everything. A refusal — a chant older than the `operator log`
+ * subcommand, an unreadable answer — lands on the panel as its own sentence: an
+ * empty timeline must never stand in for "behold couldn't ask".
+ */
+function loadOperatorHistory() {
+  if (staticMode || operatorHistory.loading) return;
+  operatorHistory = { ...operatorHistory, loading: true, error: null };
+  apiFetch("/api/operator/log")
+    .then((r) => r.json())
+    .then((j) => {
+      operatorHistory = j && j.history
+        ? { open: true, loading: false, error: null, data: j.history }
+        : { open: true, loading: false, error: (j && j.error) || "the server answered with no timeline", data: null };
+      renderDial();
+    })
+    .catch((e) => {
+      operatorHistory = { open: true, loading: false, error: String(e), data: null };
+      renderDial();
+    });
+}
+
 /**
  * Record a converge gate's resolution — `chant approve <op> <gate>`, delegated
  * exactly as the run gate's signal is.
@@ -3837,6 +3953,9 @@ function approveConvergeGate(op, gate) {
         showToast(`✓ ${gate} — ${APPROVED_SEMANTICS}`, true);
       }
       pollOperatorStatus();
+      // A resolution just became a ledger record. Re-read the timeline only if
+      // it is already open — still a human's ask, not a background refresh.
+      if (operatorHistory.open) loadOperatorHistory();
     });
 }
 

package/web/index.html

@@ -390,9 +390,31 @@
       .operator-meta { font: var(--t-caption)/1.5 var(--font-mono); color: var(--muted);
         overflow-wrap: anywhere; }
       .operator-gates { font: var(--t-caption)/1.6 var(--font-mono); color: var(--pending); flex: none; }
-      /* Why one line is all there is (chant#2029). A statement, not an alarm —
-         the same voice .run-lost uses for what behold does not know. */
+      /* Why one line is all the strip has, and where the rest is (chant#2029).
+         A statement, not an alarm — the same voice .run-lost uses for what
+         behold does not know. */
       .operator-caveat { font-size: var(--t-caption); color: var(--muted); }
+      /* The converge history (chant#2029) — the timeline the strip is NOT,
+         reached from it. Closed by default and read on the click that opens it,
+         so this whole block is inert until a human asks for it. */
+      .operator-history { display: flex; flex-direction: column; gap: 4px; }
+      .operator-history-toggle { align-self: flex-start; background: none; color: var(--pending);
+        border: none; padding: 0; font-size: var(--t-caption); cursor: pointer; }
+      .operator-history-head { font: var(--t-caption)/1.5 var(--font-mono); color: var(--muted); }
+      /* Ticks and gate resolutions, oldest first — chant's own order. The rule
+         down the left is the lane: one column of time, read forward. */
+      .operator-timeline { display: flex; flex-direction: column; gap: 6px;
+        border-left: 1px solid var(--rule); padding-left: 8px; max-height: 320px; overflow-y: auto; }
+      .operator-entry { display: flex; flex-direction: column; gap: 1px; }
+      /* A resolution is the human's half of the loop, so it wears the gate's own
+         colour rather than the tick's. */
+      .operator-entry-gate-resolution .operator-meta { color: var(--managed); }
+      .operator-gated { font: var(--t-caption)/1.5 var(--font-mono); color: var(--foreign);
+        overflow-wrap: anywhere; }
+      /* chant#2028's address. A link only ever appears where a fact carried one
+         — there is no placeholder state for this rule to style. */
+      .operator-url { display: block; font: var(--t-caption)/1.5 var(--font-mono); color: var(--pending);
+        overflow-wrap: anywhere; }
       /* The converge gate's own two lines, inside the shared .run-gate card:
          which loop this is, and what approving actually does. */
       .operator-loop { font: var(--t-caption)/1.5 var(--font-mono); color: var(--foreign); }